Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft
File: fOaNr18IlFbA4dAiRTk1Maxbj8s.mft (raw, json)
Hash identifier: Iq1XOkl2w6k3hONokfl/ib6srs086wxHG1vE9MLXlIo=
Subject key identifier: 3C:B3:7D:D3:55:C7:19:36:30:34:74:A2:94:7C:C7:68:1D:54:60:18
Authority key identifier: 7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
Certificate issuer: /CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Certificate serial: 01976D3D7C4C3735BF2958A3DBCEFA63D6C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft
Manifest number: 15DE
Signing time: Sat 14 Jun 2025 07:00:35 +0000
Manifest this update: Sat 14 Jun 2025 07:00:35 +0000
Manifest next update: Sun 15 Jun 2025 07:00:35 +0000
Files and hashes: 1: Gy2CW0Td6J-rxJGzgVfuTvJN2Gc.roa (hash: /b5aRnHH3wnxArlR5kFKg9d+odQfqWviv5wIlL2Kwi4=)
2: LuPOINyFzX9xpTNNLpVMhkc3RGs.roa (hash: CVfqSYlx9earVowtUFnY2vr9Ypav6ng0WSshJUDgEG0=)
3: W0y-zOIi1-67OubMNwYseTI2YtY.roa (hash: o3q76eBrYuH9u8MB8bIslqFqm+BZyQwFbiFNU/6C+2A=)
4: ZqndhkwRTddU5mFz7nKiM7KmfA4.roa (hash: auLo3jtVqi8tNZaiJedTVCua/FN/Py1ZFOvqQ5QE/z4=)
5: fOaNr18IlFbA4dAiRTk1Maxbj8s.crl (hash: S+W5HM9PSNgNB9D3O+s0BBV0KAkgSiQapxeyzsL4PJc=)
6: k0BbLfW1pH9JeekCNksDJuhLIU8.roa (hash: I7bsd1t0LSwpkWSpjQNC0fheclbb8PLVx1rVQYbgTzo=)
7: nh1DAdGlkCnqMoRCOw5nSf1eUrE.roa (hash: 6CL3sDa/YSgMH6T3lPf7wvZWcq37OdDdy32xWrUSt1w=)
8: zavgzNemz0PuzWJnrL1r_g_mOeM.roa (hash: GhTFQ6FabhR00Vo0TF/PdK9RjLjp+971izL/zbfm494=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:7c:4c:37:35:bf:29:58:a3:db:ce:fa:63:d6:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Validity
Not Before: Jun 14 07:00:35 2025 GMT
Not After : Jun 15 07:00:35 2025 GMT
Subject: CN=3cb37dd355c71936303474a2947cc7681d546018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:74:b3:96:c9:8d:a2:29:fa:fe:f3:2c:a3:ea:
02:1d:50:8c:ef:2b:4b:3e:5c:54:81:2d:d3:b0:e4:
2e:2d:71:d1:e0:cd:92:ac:9e:0e:20:e6:d6:dd:19:
b1:42:75:ef:08:3b:20:66:95:ea:db:c5:95:5e:03:
82:6a:04:7a:09:b3:95:c8:e6:cb:07:cc:3a:85:29:
89:41:60:74:1b:82:90:2e:53:67:6f:e9:ef:eb:79:
82:44:ca:4d:ba:22:e0:5b:69:cb:1f:c5:73:d3:8a:
3e:5c:46:22:54:d7:79:28:ea:4f:ca:45:d9:fb:c8:
ff:9f:81:c0:3a:93:52:40:53:28:28:ce:00:8a:21:
16:75:66:2f:1c:bb:43:58:a4:59:1a:6c:71:c9:ee:
b7:f0:09:74:9a:29:47:aa:91:56:ca:ac:30:17:e9:
34:17:d7:0d:f9:5f:2a:e2:3d:95:f1:db:1c:56:4b:
7a:88:76:96:3c:12:c2:06:24:1f:93:7f:7c:c3:12:
72:50:43:8a:c0:60:8d:ad:1a:ae:db:73:32:6e:23:
ac:0c:d2:82:fa:09:34:5d:e0:9a:27:fd:de:e6:e4:
12:9c:ca:88:c5:a3:22:af:b1:d2:07:eb:04:8f:05:
96:6d:58:e6:cf:78:86:67:ed:78:ba:ab:d6:d1:02:
f0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B3:7D:D3:55:C7:19:36:30:34:74:A2:94:7C:C7:68:1D:54:60:18
X509v3 Authority Key Identifier:
keyid:7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:12:05:2f:96:db:70:84:5e:75:6a:72:4e:69:17:c1:de:84:
2c:23:92:c1:12:fd:9d:5b:e7:66:91:5b:3b:b3:e3:7c:f1:76:
68:2c:8a:81:56:c6:27:c5:a5:d2:f3:8e:d6:fe:b1:16:f0:c5:
5a:04:1e:b4:51:fe:d5:fb:d7:88:b1:b9:10:71:c8:a8:e3:91:
35:9c:ec:4c:a1:f3:3d:68:3f:1d:5d:57:0f:a4:48:08:5a:4d:
a5:49:05:2c:35:c8:ca:74:c5:ae:89:56:cb:09:41:f4:fc:41:
f7:08:15:96:1a:a9:26:fc:32:5c:05:11:c7:2b:91:6e:c7:f8:
0f:6d:97:e5:bb:bc:32:4c:a2:5a:6e:a0:ed:72:a4:71:24:26:
4b:a4:3e:37:28:8c:19:22:97:ca:27:24:d4:ea:6f:d2:0a:1c:
ae:42:f0:b6:e8:0c:0b:ea:0b:ca:d0:54:9a:b3:be:17:d2:2b:
5d:f9:34:52:3c:5d:bc:1b:66:1a:af:42:4d:69:63:64:0d:c8:
d5:15:28:49:31:01:5f:40:bf:c8:9b:3e:7d:a5:0f:c3:d2:60:
d8:38:f2:47:54:18:4d:7a:b4:11:b9:22:c8:e8:8e:f6:84:24:
e5:99:ef:21:d7:21:a9:4e:22:5c:1d:a5:90:c2:56:14:55:e4:
b2:0e:78:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:47:02 2025 by rpki-client